Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: Y+irI9t4MyUP2QLSg3evqjT29udVZ98JgyuBmPteceg=
Subject key identifier: 98:7C:CA:D3:43:52:FB:10:25:D1:39:27:1E:EC:91:25:77:B1:71:39
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 019936F08A902AF1B11C8299B29AB71098C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 13B1
Signing time: Thu 11 Sep 2025 04:02:37 +0000
Manifest this update: Thu 11 Sep 2025 04:02:37 +0000
Manifest next update: Fri 12 Sep 2025 04:02:37 +0000
Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: wP5FCZEJnaQpGm2mGx4g9AAp/TELHxeUooBtA/904p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:8a:90:2a:f1:b1:1c:82:99:b2:9a:b7:10:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Sep 11 04:02:37 2025 GMT
Not After : Sep 12 04:02:37 2025 GMT
Subject: CN=987ccad34352fb1025d139271eec912577b17139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:26:3e:14:83:ca:79:0a:7d:54:17:a4:fc:
ac:1d:c9:75:fc:7b:87:bd:51:02:f8:f9:46:28:fa:
d5:62:32:fb:30:4d:46:8f:07:39:1c:db:95:0d:1c:
25:c4:c4:9b:8c:f6:70:be:81:47:48:c1:55:a5:6c:
c6:eb:df:4f:1f:f2:4e:e3:34:2c:0d:0d:6f:02:2d:
cf:35:40:0a:4a:e7:d2:d3:13:be:bc:47:48:be:44:
21:31:96:2a:da:81:3f:ec:cb:91:d4:16:db:03:43:
10:45:41:26:e4:02:84:18:69:9c:18:cd:d2:e1:35:
cb:26:3c:7e:ee:10:f7:56:36:6f:26:ed:82:d0:60:
07:9b:6a:1b:1c:8f:d8:70:4c:34:fd:19:b2:29:f4:
24:49:fc:81:82:ae:80:df:50:83:dd:6f:2d:b4:ff:
22:7e:e6:73:66:aa:01:78:bd:8f:f1:6d:6d:3f:b2:
75:34:ee:89:c7:69:c4:bd:d9:e0:f2:79:71:56:c9:
9e:95:7d:70:cc:38:96:7e:43:ed:c4:c5:1d:36:46:
51:50:a7:f2:b4:92:a6:07:b4:5b:c1:e8:89:22:a9:
fe:b7:17:03:64:ff:ee:af:1d:59:b0:ac:eb:89:d9:
36:4c:19:e1:1d:1e:d0:57:8c:0c:54:c0:e1:ac:20:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:CA:D3:43:52:FB:10:25:D1:39:27:1E:EC:91:25:77:B1:71:39
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f4:dc:97:66:f2:ce:ff:0c:af:28:37:93:23:ab:e7:1f:38:
7d:ce:eb:35:10:f2:e8:25:b0:05:e2:89:70:c4:3f:6e:68:1f:
6b:8b:0f:d6:65:7a:d7:75:5c:84:86:19:f1:8b:96:c3:3c:07:
8c:28:ff:ef:5b:40:f0:24:fb:02:b3:96:96:80:cc:7e:12:81:
90:df:93:66:bb:40:c6:d9:b8:fd:1f:30:a0:b3:92:a8:2f:51:
f2:2f:cb:2e:3c:25:61:ba:5b:3a:bb:99:81:6f:c9:ce:15:1b:
81:61:48:84:c6:a5:21:c2:53:81:bb:71:25:11:c8:25:d1:bc:
27:f1:2d:6c:e9:55:3c:83:df:42:3f:8e:1f:e3:ef:c3:e0:4a:
2c:46:8d:ca:86:44:08:48:d6:b2:6f:01:7b:ac:e9:10:f1:77:
94:e3:1b:93:0a:8b:3b:1a:03:b1:30:ef:70:63:96:26:9a:b9:
84:92:42:34:7d:6f:0b:f1:f7:8c:a5:65:29:74:90:13:06:74:
1c:1f:c8:09:a0:41:74:c6:a0:ef:e8:22:be:fe:53:ad:a8:0f:
c3:5d:86:c1:87:1b:fb:72:e1:5b:bb:a1:14:e1:aa:88:49:45:
06:61:59:fa:93:72:9c:88:4e:68:5b:bc:70:71:9c:05:a0:28:
a3:f5:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:00:47 2025 by rpki-client